🎯 New Report #3632577: Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections
🔺Severity: Medium
👽 Reporter: mistercloudsec
⭐️ Reputation: 142
🛠 State: resolved
💼 Team: AWS VDP
💵 Bounty: null
🕐 Submitted: 2026-03-27
⏰ Disclosed: 2026-07-15 15:11:59
📝 Summary: The Bedrock AgentCore Starter Toolkit was found to create IAM roles for the AgentCore Gateway with trust policies that lacked certain condition keys. This enabled a cross-account confused deputy attack where any AgentCore workload in any AWS account could assume the victim's Gateway role. The role granted access to sensitive resources in the account, including secrets, KMS, Lambda, DynamoDB, and S3.
📂 Report JSON File: 3632577
@hackeronereports